Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/323830343a336664303a3a2f33332d3333203d3e20323635393137.roa
File:                     323830343a336664303a3a2f33332d3333203d3e20323635393137.roa (raw, json)
Hash identifier:          +HMVGw/FsjlaWbP9vT7XwC/izCdD7IxalT4t6nMeSG4=
Subject key identifier:   3A:74:00:B3:C7:5D:96:7F:74:03:9E:42:02:91:FC:2F:16:F4:20:6C
Certificate issuer:       /CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
Certificate serial:       70808FA3AA67B9FACF519471A5470D9425BFCC2B
Authority key identifier: DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/323830343a336664303a3a2f33332d3333203d3e20323635393137.roa
Signing time:             Tue 02 Jan 2024 14:00:00 +0000
ROA not before:           Tue 02 Jan 2024 13:55:00 +0000
ROA not after:            Tue 31 Dec 2024 14:00:00 +0000
asID:                     265917
IP address blocks:        2804:3fd0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:80:8f:a3:aa:67:b9:fa:cf:51:94:71:a5:47:0d:94:25:bf:cc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
        Validity
            Not Before: Jan  2 13:55:00 2024 GMT
            Not After : Dec 31 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:2e:64:08:05:cb:a0:a7:79:42:64:48:67:
                    5b:c0:0b:86:81:85:d6:15:35:a6:44:7c:b9:57:17:
                    69:34:9a:cc:77:45:66:09:31:12:be:12:20:d5:3b:
                    7e:32:14:db:ea:dd:8e:6b:64:69:eb:f8:db:bf:51:
                    03:b1:8c:38:84:c2:4a:b3:6f:97:b0:c0:de:2b:28:
                    dc:43:c6:29:4f:2e:6d:36:61:50:b2:7a:ff:5f:b3:
                    52:65:d1:b4:93:d9:c2:6f:cb:bc:84:22:bd:fe:91:
                    7e:6c:49:2f:26:f5:71:b5:35:5f:17:4e:34:2c:1c:
                    51:9b:d0:22:dd:6a:ca:b8:3c:3d:41:d4:31:cf:b1:
                    e3:e6:bc:b4:c1:a7:d0:2f:8a:b9:9f:15:31:ba:6f:
                    17:68:46:96:b4:9a:da:90:6f:c6:94:07:91:1d:0a:
                    d3:a2:67:6e:a2:a4:77:b9:94:b3:e0:06:da:1f:c3:
                    77:3d:ea:15:d0:e0:11:06:76:01:ce:1a:f3:f0:41:
                    5d:50:de:d5:0a:b6:3f:3a:a9:18:7d:87:34:03:d7:
                    c7:c6:78:3b:62:98:a0:83:87:7d:0a:ca:b3:d2:57:
                    7b:df:05:e0:d2:69:97:a0:01:fa:2f:ec:fb:f6:cc:
                    68:c4:31:fc:90:1a:c2:66:dc:e2:c5:fd:80:b3:ff:
                    38:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:74:00:B3:C7:5D:96:7F:74:03:9E:42:02:91:FC:2F:16:F4:20:6C
            X509v3 Authority Key Identifier:
                keyid:DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/323830343a336664303a3a2f33332d3333203d3e20323635393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:78:aa:71:8b:38:55:5e:5c:e9:97:bc:7f:9b:84:e5:44:52:
         90:87:a0:cf:7c:78:82:04:45:4e:4b:12:b3:45:f5:f0:44:b4:
         c0:5b:54:97:85:2f:fc:75:d2:25:14:f7:7c:9f:72:f2:d6:3a:
         b0:85:89:4c:bd:96:d5:42:3d:13:7a:3a:5f:5d:f9:d7:c5:cc:
         a9:a5:fd:26:3d:22:ab:fb:cd:d9:cf:b6:86:84:4a:d8:a4:87:
         16:81:7a:30:b2:c0:19:f2:c1:81:cd:01:af:fd:d4:f8:3a:cf:
         64:34:79:d7:23:5b:31:d7:95:26:0d:34:37:c4:4f:6b:e9:e9:
         15:9a:c9:0e:8e:e7:9c:f4:9f:da:1f:1b:85:08:a2:28:70:89:
         1f:03:ab:91:74:f8:a8:9e:08:6b:ab:ed:2a:d7:2a:1e:8c:35:
         3e:16:00:81:9e:69:68:03:3e:93:bd:66:21:65:cb:1e:29:ca:
         3f:15:5c:5d:7e:d7:8e:1c:45:a8:7f:88:22:05:25:a0:61:8f:
         d4:4d:7e:b4:2f:5f:5f:49:e1:2c:6d:94:e1:89:eb:bc:15:c6:
         17:d8:78:a1:c1:4b:34:80:a9:b2:89:e9:1d:c1:e6:7e:c0:80:
         d9:fe:09:94:c4:b1:d3:e5:cd:9b:bc:99:20:95:c3:52:69:6b:
         db:30:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org